Skip to content

Commit 52f1cb1

Browse files
committed
update artifact inspection option documentation
1 parent 0fb7054 commit 52f1cb1

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

website/content/docs/configuration/client.mdx

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -502,11 +502,16 @@ refer to the [drivers documentation](/nomad/docs/job-declare/task-driver).
502502
- `disable_artifact_inspection` `(bool: false)` - Specifies whether to disable
503503
artifact inspection for sandbox escapes. If the platform supports filesystem
504504
isolation, and it is not disabled, artifact inspection will not be performed
505-
regardless of this value.
505+
regardless of this value. When artifact inspection is performed, Nomad will
506+
merge the unpacked contents of the artifact into the destination path if it
507+
already exists. Depending on the remote source used, this may be different
508+
behavior than when the artifact is unpacked without inspection.
506509

507510
- `disable_filesystem_isolation` `(bool: false)` - Specifies whether filesystem
508511
isolation should be disabled for artifact downloads. Applies only to systems
509512
where filesystem isolation via [landlock] is possible (Linux kernel 5.13+).
513+
When applied, Nomad will inspect the unpacked contents unless inspection is
514+
disabled with `disable_filesystem_isolation`.
510515

511516
- `filesystem_isolation_extra_paths` `([]string: nil)` - Allow extra paths
512517
in the filesystem isolation. Paths are specified in the form `[kind]:[mode]:[path]`

0 commit comments

Comments
 (0)